← Back

Cluster Glue

cluster_glue

Vendor: Clusterlabs • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2010-2496
1Clusterlabs
2Cluster Glue
Pacemaker
Nov 21, 2024
Oct 18, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fi...Show more
stonith-ng in pacemaker and cluster-glue passed passwords as commandline parameters, making it possible for local attackers to gain access to passwords of the HA stack and potentially influence its operations. This is fixed in cluster-glue 1.0.6 and newer, and pacemaker 1.1.3 and newer.Show less